SecretMaster v0.1.0-beta.7 | Beta

SecretMaster Public Beta

This is the first public beta of SecretMaster, a powerful desktop manager for
GitHub Actions variables and write-only secrets.

Highlights

• Inventory repository, environment and organization scopes in one desktop UI.
• Generate configurable passwords and Ed25519, ECDSA or RSA SSH keypairs.
• Replace one secret across explicitly selected scopes, with GitHub push off by
  default and shown in a confirmation preview.
• Create and restore portable authenticated encrypted backups containing the
  database and its matching master-key generation.
• Download portable builds for Linux x86_64 and Windows x86_64.

Security boundary

• GitHub does not return existing secret plaintext, so SecretMaster cannot import
  or compare an already stored GitHub secret value.
• The live SQLite database is not fully encrypted. Local secret values and
  secret-bearing audit payloads are encrypted; ordinary variables and
  operational metadata remain readable.
• Portable backups encrypt the complete database and matching master key under a
  separate backup password.
• Rotation updates SecretMaster and, when explicitly enabled, GitHub. It does not
  rotate a PostgreSQL role, install an SSH public key or revoke an external key.

Beta notes

• The Windows ZIP is unsigned and may trigger a reputation warning.
• CI runs the complete 20-project test suite on Linux. Three tests use POSIX fake
  command harnesses; Windows CI accounts for them explicitly, runs the other 17
  test projects, then smoke-tests the packaged Windows application.
• Verify SHA256SUMS before running a downloaded package.

If a regression affects your workflow, keep the portable backup made before the
upgrade and return to the previous published package. Do not copy the live SQLite
database as a backup.